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Amendments to the Claims: 

this listing of claims replaces all prior versions and listings of claims in the application: 

| 

Listing of Claim s; 



1 . (Previously Presented) A computer-implemented method for transmitting a message 
from a sender to an intended recipient comprising: 

encrypting a message using a symmetric key to generate an encrypted message; 
' sending the encrypted message to an intended recipient without making the symmetric 
key immediate) y accessible to the intended recipient; 

providh ig the symmetric key to a third party; and 

if the intended recipient signs and returns to the third party a receipt including a 
representation of the encrypted message, transferring, by the third party, the receipt to a sender 
and providing the symmetric key to the intended recipient 

2. (Previously Presented) The computer-implemented method of claim 1 wherein the 
receipt signed by the recipient contains an identifier computed from the message and the 
symmetric key using cryptographically secure hash functions. 

3 * (Previously Presented) A computer-implemented method for transmitting a message 
from a sender to an intended recipient comprising: 

, at a sender, encrypting a message using a symmetric key, encrypting the symmetric key 
to make the symmetric key accessible to a third party but not immediately accessible to an 



o 

ID 



intended recipient and sending the encrypted message and the encrypted symmetric key to the ^ 



intended recipient; ^ 



us 
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at the recipient, signing a receipt including a representation of the encrypted message and 



sending the receipt and the encrypted symmetric key to the third party; and 



i 

L 



at the third party, transferring the receipt to the sender and providing the symmetric key 
the intended recipient if the receipt is properly signed. 



(Previously Presented) A computer-implemented method For certifying receipt of a 
ijiessage, the message being sent from a sender to an intended recipient and being encrypted by a 
s ymmetric key, and the method executing at a third party distinct from the sender and the 
Recipient, the method comprising: 

receiving a signed receipt and an encrypted symmetric key from an intended recipient, 
l|he signed receipt memorializing receipt of the encrypted message by the intended recipient; 
verifying the signed receipt; 
transferring the verified receipt to a sender; and 
providing the symmetric key to the intended recipient. 



5. (Currently Amended) A computer-implemented method for certifying receipt of a 
message, the message being sent from a sender to an intended recipient and being encrypted by a 
symmetric key the method executing at a third party distinct from the sender and the recipient, 
the method comprising: 

receiving a separately encrypted message header associated with the message and a 
certified receipt originating from an intended recipient, the certified receipt including a message 
identifier signed by the intended recipient; 

decrypting the separately encrypted message header to expose a symmetric key and the 
message identifier; 

verifying the certified receipt^ including verifying the signature of the intended recipient 
and the message identifier in the certified receipt is the same as the message identifier obtained 
from the separately encrypted message header; , and 

after verifying the certified receipt forwarding the certified receipt to the sender[[;]] and 
forwarding the symmetric key to the intended recipient. 
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6. 

from a 



(Previously Presented) A computer-implemented method for transmitting a message 
sender to an intended recipient comprising: 
encrypting a message using a symmetric key; 
storing the symmetric key and the message; 

sending the encrypted message to an intended recipient without the symmetric key; 

forwarding the encrypted symmetric key to a third party; and 

receiving from the third party a certified receipt verified by the third party indicating 



receipt of the message by the intended recipient 

X (Previously Presented) A computer-implemented method for transmitting a message 
from a sender to an intended recipient comprising: 

identifying a message for transmission to an intended recipient; 

creating a message header that includes a symmetric key and a message identifier 
associated with the message; 

encrypting the message using the symmetric key; 

public key encrypting the message header using a public key of a third party; 
( attaching the message header to the encrypted message forming a certified message and 
forwarding the certified message to the intended recipient; 
; storing a copy of the certified message and the symmetric key; 

1 receiving a certified receipt originating from an intended recipient, the certified receipt 
being verified ai the third party and forwarded to the sender after verification; and 

verifying validity of the receipt using the stored symmetric key and the certified message. 

si. (Previously Presented) A computer-implemented method for providing a receipt for a 
message, the message being sent from a sender to an intended recipient and the method 



executing at the recipient, the method comprising: 

receiving an encrypted message from a sender, the message encrypted by a symmetric 
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; creating a receipt for the encrypted message including signing a hash of the encrypted 

message and returning the signed receipt to a third party; 

i 

| after verification of the signed receipt at the third party, receiving the symmetric key 
torn the third party; and 

decrypting the encrypted message using the symmetric key. 



9- (Previously Presented) The computer-implemented method of claim 8 wherein the step 
of receiving the symmetric key includes not receiving the symmetric key until a successful 
transfer of the signed receipt to the sender. 



(Previoi isly Presented) The method of claim 6, further comprising: 
verifying the validity of the certified receipt using the stored symmetric key and the 
certified message. 



11. (Previously Presented) A computer-implemented method for generating a receipt 
associated with a message, where the receipt is created without exposing the content of the 

i . . 

message to an intended recipient, compnsmg: 

receiving a message encrypted by a symmetric key; 
receiving a hash of the symmetric key; and 

i 

generating a receipt including generating a message identifier prior to decrypting the 
message, the message identifier including a representation of the hash of the symmetric key and 
the message encrypted by the symmetric key; 

wherein the message identifier is able to be used to verify receipt of the message at die 

i 

intended recipient without exposing the message content to an intended recipient. 



12. (Previously Presented) The computer-implemented method of claim 1 1 , wherein: 
' generating a receipt including a message identifierjncludes using a hash function. 
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: 3, (Previously Presented) The computer-implemented method of claim 1 1 > further 
comprising: — 

receiving a first message identifier at the intended recipient; 
| the gentTating step including generating a receipt including a second message identifier, 
at the intended recipient; and 

j sending the receipt and the first message identifier to a third party. 



j receivin g the receipt, at the third party; 

J verifying the receipt without accessing the message content; and 
| providing the receipt to a sender. 

! 5. (Previously Presented) The computer-implemented method of claim 11, where: 

the message is encrypted with the symmetric key prior to sending to the recipient; and 
the symmetric key is sent to the intended recipient from a third party so that the intended 

Recipient can decrypt the message. 

i 
i 

1 6. (Prcvioi isly Presented) The computer-implemented method of claim 1 1 , further 
comprising: 

1 sending the encrypted symmetric key to the intended recipient with the message; 
j at the in tended recipient, sending the encrypted symmetric key to a third party with a 
ljeceipt that includes a representation of the message identifier; and 

sending the receipt to a sender after verification of the receipt. 

17. (Previously Presented) A computer-implemented method for generating a signed receipt 
associated with a message without exposing the content of the message, comprising: 

j receiving a message encrypted by a symmetric key; 
I receivin g a hash of the symmetric key; 



14. (Previously Presented) The computer-implemented method of claim 13, further 



comprising: 
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generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key; and 

signing the representation to generate a signed receipt; 

wherein the receipt is generated prior to decrypting the message and receiving the 
symmetric key* 

i 

1 8. (Previously Presented) The computer-implemented method of claim 1 7, further 
comprising: 

sending the signed receipt to a third party for transfer to a sender; and 
verifying the validity of the signed receipt at the third party. 

19. (Previously Presented) The computer-implemented method of claim 18, further 
comprising: 

allowing a recipient access to the content of the message if the signed receipt is verified 
£ t the third party. 

20. (Previously Presented) A computer-implemented method for time-stamping a message 
without exposing the content of the message to a time stamping authority, comprising: 

[ encrypting the message using a symmetric key, 
computing a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
"by the symmetric key; and 

time-stamping the representation. 

21 . (Previously Presented) The computer-implemented method of claim 20, wherein: 

; time-stamping the representation includes sending the representation to a time-stamping 
authority and receiving from the time-stamping authority a time stamp certificate including the 
representation and a time. 
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22. (Previously Presented) A computer-implemented method for time-stamping a message 
jvithout exposing the content of the message to a time stamping authority, comprising: 

encrypting the message using a symmetric key; 
computing a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
fey the symmetric key; and 

time-stamping the representation, including sending the representation to a time-stamping 
authority and receiving from the time-stamping authority a time stamp certificate including the 
Representation, a time, a sender identification and a recipient identification for the message. 

i 
i 

23 . (Previously Presented) A computer-implemented method for time-stamping a message 
without exposing the content of the message to a time stamping authority, comprising: 

encrypting the message using a symmetric key; 
j computing a hash of the symmetric key; 

i generating a representation of the hash of the symmetric key and the message encrypted 
i>y the symmetric key; and: 

time-stamping the representation, including sending the representation to a time-stamping 

i 

authority and receiving from the time-stamping authority a time stamp certificate including the 
representation, a time, a sender identification and a recipient identification for the message and 

at least one of a puhlic key of the sender and a public key of the recipient. 

i 

j 

i 

24. (Previously Presented) A computer-implemented method for generating a signed receipt 
certifying that a message has been received at a particular time by an intended recipient without 

i 

exposing the message content, comprising: 

receiving a message having content, wherein the message is encrypted by a symmetric 

Ipy, 

receiving a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 

i 

tiy the symmetric key, wherein the representation is generated prior to decrypting the message 
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and receiving the symmetric key; 
! time-stamping the representation; and 
| signing the time-stamped representation. 

25, (Previously Presented) The computer-implemented method of claim 24, farther 
comprising: 

sending the time-stamped representation to a third party such that the time stamp can be 
Verified by the third party without exposing the content of the message to the third party; and 
verifying the validity of the signed receipt at the third party. 

i6. (Previously Presented) The computer-implemented method of claim 25, further 
Comprising: 

allowing an intended recipient access to content of the message if the signed receipt is 
erified at the third party. 

27. (Previously Presented) A computer-implemented method for generating a signed receipt 
ibr a message certifying a sending time and a receiving time by an intended recipient without 
exposing the content of the message, comprising: 

receiving a message encrypted with a symmetric key; 
i receiving a hash of the symmetric key] 

receiving a time-stamped representation of the hash of the symmetric key and the 
encrypted message, the representation being time-stamped at time of sending; 

time-stamping the representation at a time of receiving; 
; combiniug the representation time-stamped at the time of sending and the representation 
time-stamped ai the time of receiving providing a combined receipt; and 

signing the combined receipt; and 
• sending the combined receipt to a third party such that the combined receipt can be 
verified by the third party without exposing the content of the message to the third party. 
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28. (Previoi isly Presented) The computer-implemented method of claim 27, further 
comprising: 

verifying the validity of the signed receipt at the third party. 



29. (Previously Presented) The computer-implemented method of claim 27, further 
i 

comprising: 

j allowing an intended recipient access to content of the message if the signed receipt is 
verified at the third party. 

30. (Previously Presented) The computer-implemented method of claim 1 , further 
comprising: 

computing a hash of the symmetric key; and 
j making the hash of the syxninetric key accessible to the intended recipient, wherein the 
Receipt contains a representation of the symmetric key. 



3 1 . (Previoi isly Presented) A computer-implemented method for securing sending a 

i 

message, comprising: 

! encrypting a message using a symmetric key; 

computing a hash of the symmetric key; and 
; generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key. 

i 

32. (Previoi isly Presented) The computer-implemented method of claim 3 1 , wherein: 
generating the representation includes using a one-way hash. 

i 

33. (Previously Presented) The computer-implemented method of claim 31, further 



comprising: 



sending a request including the representation to a time stamping authority; 
receiving from the time stamping authority a time stamp certificate including a time 
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stamped representation of the hash of the symmetric key and the message encrypted by the 
symmetric key; 

constructing a certified message including the time stamp certificate; and 
sending the certified message to a recipient. 

i4. (Previously Presented) A computer-implemented method for computing a message 
identifier associated with a message comprising: 

encrypting a message using a symmetric key to generate an encrypted message; 
computing a hash of the symmetric key; and 

generating a representation of the hash of the symmetric key and the encrypted message. 



35. (Previously Presented) The computer-implemented method of claim 34 wherein 
generating the representation of the hash of the symmetric key and the encrypted message 
including using a one-way hash function. 



36. (Previoi isly Presented) A computer-implemented method of for securely sending and 
receiving a message, using a third party to verify the authenticity of the message, comprising: 
at a sender: 

encrypting a message using a symmetric key to generate an encrypted message; 
sending the encrypted message to an intended recipient without making the 
symmetric key immediately accessible to the intended recipient; and 
] jroviding the symmetric key to a third party; 
at the in tended recipient: 

receiving the encrypted message from the sender; 

creating a signed receipt for the encrypted message, including signing a hash of 
the encrypted message and returning the signed receipt to the third party; 

;ifter verification of the signed receipt at the third party, receiving the symmetric 
key from the third party; and 

decrypting the encrypted message using the symmetric key; 
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at the third party: 

receiving the signed receipt from the recipient; 
verifying the signed receipt; 
li^sferring the verified receipt to the sender; and 
l>roviding the symmetric key to the intended recipient. 



37. (New) r Hie computer implemented method of claim 36, wherein: 
at the sender: 

sending the encrypted message to an intended recipient includes encrypting the 

symmetric key with a public key of the third party and sending the encrypted symmetric key to 

• i 
j 

Ijhe intended recipient so that the intended recipient cannot access the symmetric key or the 
message prior to the recipient returning the signed receipt to the third party; and 

j encrypting a message using a symmetric key to generate an encrypted message 

includes creating a first hash of encrypted content of the message and including the first hash of 
the encrypted content in the encrypted message; 

i at the intended recipient: 

leturning the signed receipt to the third party includes creating a second hash of 
the encrypted content in the message, sending the second hash of the encrypted content in the 
message, forwarding the encrypted symmetric key to the third party for the third party to decrypt 
the key, but not sending the encrypted content to the third party; 
at the third party; 

providing the symmetric key to the intended recipient after verifying the signed 
receipt from the recipient; 

verifying the signed receipt includes verifying that the first hash of the encrypted 
content equals the second hash of the encrypted content; and 

j providing the symmetric key to the intended recipient includes decrypting the 

encrypted symmetric key sent by the recipient. 
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38. (New) The computer-implemented method of claim 1 , wherein: 

| sending the encrypted message to an intended recipient includes encrypting the 
symmetric key with a public key of the third party and sending the encrypted symmetric key to 
jhe intended recipient so that the recipient cannot access the symmetric key or the message prior 
to the recipient returning the signed receipt to the third party; and 

[ encrypting a message using a symmetric key to generate an encrypted message includes 
creating a first hash of encrypted content of the message and including the first hash of the 
encrypted content in the encrypted message. 

I 

39. (New) r rhe computer-implemented method of claim 3, further comprising: 

at the sender, creating a first hash of encrypted content of the message and sending the 

i 

first hash to the recipient; 

| at the recipient, creating a second hash of the encrypted content in the message, sending 
the second hash to the third party and decrypting the encrypted message after receiving the 
symmetric key .from the third party; and 

; at the third party, comparing the first hash to the second hash to verify that the first hash 
is equal to the second hash, decrypting the encrypted symmetric key, wherein providing the 
symmetric key does not occur until after comparing the first and second hashes. 

(New) The computer-implemented method of claim 4„ further comprising: 
decrypting the encrypted symmetric key for providing to the intended recipient. 

! 

41 . (New) The computer-implemented method of claim 40, wherein: 

decrypting the encrypted symmetric key includes decrypting the encrypted symmetric 
key received from the recipient, wherein the recipient received the encrypted symmetric key 

from the sender 

i 
I 

4k. (New) The computer-implemented method of claim 4, wherein: 

| providing the symmetric key to the intended recipient occurs after verifying the signed 
receipt 
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43. (New) The computer-implemented method of claim 4, wherein: 

verifying the signed receipt includes determining that a hash of the encrypted message 
Created by the sender is equivalent to a hash of the encrypted message created by the recipient. 

jl4. (New) 1 The computer-implemented method of claim 4 f wherein: 
i 

j verifying the signed receipt ensures that the intended recipient received an encrypted 
message sent by the sender. 

is, (New) The computer-implemented method of claim 5, wherein the message identifier 

i 

includes a hash of the encrypted message, the method further comprising: 

I verifying that the message identifier signed by the intended recipient equals the message 

j 

identifier in the separately encrypted message header. 

46. (New) The computer-implemented method of claim 5 9 wherein: 

forwarding the symmetric key to the intended recipient occurs after verifying the certified 

receipt 
i 
i 
i 

47. (New) The computer-implemented method of claim 6, wherein: 

| forwarding the encrypted symmetric key to the third party without exposing the message 

to the third parly. 

! 

48. (New) ' [he computer-implemented method of claim 7, wherein the method does not 
mclude sending the message to the third party. 

A9- (New) The computer-implemented method of claim 8, further comprising: 

receiving a first hash of the encrypted message from the sender; 
: hashing the encrypted message to create a second hash of the encrypted message; and 
j sending the first and second hashes to the third party for the third party to verify that the 
first hash equals the second hash. 
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50. (New) The computer-implemented method of claim 17 7 wherein further comprising: 
receiving a first hash of encrypted content; 

hashing the received encrypted message content to create a second hash of the encrypted 
content; and 

sending the first and second hashes to a third party for verification, 

5 1 . (New) ' Hie computer-implemented method of claim 3 1 , further comprising: 
sending the representation of the hash of the symmetric key and the message encrypted 

by the symmetric key to a recipient, wherein the recipient does not have access to the symmetric 
hey for decrypting the message at the time of receiving the encrypted message. 
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